Child Safety – Securing the home network

When at home

One of the simplest and most effective steps is to secure your network by changing your router’s DNS settings.

What is DNS?

Think of DNS (Domain Name System) as the internet’s address book. You type in a domain name, for example: google.com, and your browser looks it up to find the correct server that hosts the site.

You could manage your own DNS server, however doing this properly takes constant upkeep and becomes a game of cat and mouse. It’s also unnecessarily complex for most households.

So what can we do?

We can tell your router to use a DNS provider that specialises in blocking malicious content, pornography, and other adult-themed material.

Fortunately, a trusted option exists – Cloudflare.

How does it work?

Going back to our address book analogy:
When you request a website that’s on the block list, Cloudflare will return an “invalid” address. Your browser won’t be able to find the server and the site simply won’t load.

It’s that straightforward.

What else does it do?

Cloudflare also works with major search engines like Google and Bing, automatically enforcing SafeSearch. This adds an extra layer of filtering to remove adult content from search results.

It even forces YouTube to run in restricted mode, reducing the risk of children stumbling across inappropriate videos.

Can it be trusted?

Whenever you change your DNS, you’re choosing who gets to handle your internet lookups so it’s important to pick a reputable service.

Cloudflare is one of the largest and most trusted internet infrastructure companies in the world. They operate a global network that powers and protects millions of websites, with a strong reputation for privacy and security. Their family-friendly DNS service (1.1.1.3) is free to use and does not sell your browsing data.

Can I add my own block list?

Not with Cloudflare’s basic DNS setup. It has a fixed block list that covers malicious and adult content, but you can’t manually add domains.

Can I block social media apps like TikTok, WhatsApp, or Snapchat?

Unfortunately, not directly through DNS. Those require device-level restrictions or parental controls on your child’s phone or tablet.
I’ll be covering this in more detail in a future article.

Can I block or moderate video services like YouTube or Netflix?

Again, not entirely via DNS. However, Cloudflare does enforce YouTube’s restricted mode automatically. For platforms like Netflix, you’ll need to set up parental accounts, use PINs, and apply age restrictions in their settings. It’s a little extra work, but very effective.

Why isn’t this common knowledge?

This technology has been available for years, yet it’s rarely discussed in mainstream parenting advice.
Politicians sometimes talk about outright bans or “online safety” laws, but these approaches often miss the point. The government’s recent Online Safety Bill, for example, raises concerns about privacy, fraud risks, and effectiveness. It still leaves loopholes for the worst sites to remain accessible, and places too much responsibility on websites themselves – including those that have no incentive to comply.

A better approach is to take control of your home network now, using the tools that already exist.

How to Change Your Router’s DNS to Cloudflare’s Family-Safe Service

The process will vary slightly depending on your router model, but the basic steps are the same. These instructions cover the most common UK ISP routers.

Cloudflare Family-Safe DNS Settings

  • Primary DNS: 1.1.1.3
  • Secondary DNS: 1.0.0.3

Virgin Media Hub

    1. Open a web browser on a device connected to your Wi-Fi.
    2. Go to: http://192.168.0.1
    3. Log in with your admin password (printed on the back of your Hub).
    4. Go to Advanced Settings → DNS or LAN Settings.
    5. Turn off “Automatic DNS” or similar.
    6. Enter the Primary and Secondary DNS above.
    7. Save settings and restart the Hub.

BT Smart Hub

    1. Open a web browser and go to: http://192.168.1.254
    2. Click Advanced Settings → Broadband → Internet.
    3. Enter the admin password (on the back of the hub).
    4. Look for DNS Settings.
    5. Turn off automatic DNS assignment.
    6. Enter the Cloudflare Family-Safe DNS addresses.
    7. Save and restart the Hub.

Sky Hub / Sky Q Hub

Note: Some Sky Hubs don’t allow DNS changes directly. If your model doesn’t, you may need to set the DNS on each device individually (computer, phone, smart TV).

    1. Open a browser and go to: http://192.168.0.1
    2. Enter the admin username and password (on the back of the hub).
    3. Navigate to Advanced → LAN/IP Setup or Internet Settings.
    4. If available, turn off automatic DNS and enter the new DNS addresses.
    5. Save and restart the Hub.

Test the Setup

After your router restarts:
• Visit https://familysafety.cloudflare.com – it should confirm the filter is active.
• Try searching for adult content on Google – SafeSearch should now be locked on.

Once this is set up on the router, all devices connected to your home Wi-Fi as well as wired devices will automatically use the filter, without needing to adjust each one individually.